finished user and authorization